CVE-2026-64000

A flaw was found in the Linux kernel's High-availability Seamless Redundancy HSR module. This vulnerability allows an attacker to cause an out-of-bounds OOB access by sending a specially crafted, truncated supervision frame. The issue arises because the system does not ensure the entire TLV...

CVE-2026-64026

A flaw was found in the Linux kernel's rxrpc component. This vulnerability can lead to pagecache corruption when data packets are decrypted in-place after being transmitted locally via the splice system call. This issue stems from improper handling of packet sharing within the I/O thread,...

CVE-2026-63955

A flaw was found in the Linux kernel's memory management. This vulnerability could lead to a system crash, making the system unavailable. The issue arises from an incorrect check within the kernel's virtual memory allocation process, which mistakenly triggers a system halt under certain condition...

CVE-2026-63972

A flaw was found in the Linux kernel's mana network driver. An issue arises when the driver attempts a redundant detach operation on an already-detached network port. This can cause a null pointer dereference, leading to a system crash and a Denial of Service DoS...

CVE-2026-63913

A flaw was found in the Linux kernel's netfilter conntrack TCP state machine. A remote attacker can exploit this vulnerability by sending a specially crafted sequence of TCP Transmission Control Protocol packets, specifically a SYN synchronize packet followed by an RST reset packet with an invali...

CVE-2026-63910

A flaw was found in the Linux kernel's dma-buf Direct Memory Access buffer subsystem. A race condition in the dmabuffd tracepoint can lead to a Use-After-Free UAF vulnerability. A local attacker could exploit this by closing a file descriptor fd prematurely, causing the dmabuf to be freed while t...

CVE-2026-63989

A flaw was found in the Linux kernel's bridge module. When configuring network bridge ports, a critical function was incorrectly holding a lock during an operation that could cause the system to pause unexpectedly. This can lead to a kernel crash, making the system unavailable and resulting in a...

CVE-2026-64004

A flaw was found in the Linux kernel's AFIUCV Inter-User Communication Vehicle networking module. A local user can exploit a race condition between message reception and socket option retrieval, specifically when calling getsockoptSOMSGSIZE. This can lead to a null pointer dereference, causing th...

CVE-2026-63999

A flaw was found in the Linux kernel's ethtool subsystem, specifically within the Receive Side Scaling RSS functionality. The rssprepareget function fails to deallocate memory for the indirection table and hash key buffer if an internal operation ops-getrxfh does not complete successfully. This...

CVE-2026-63935

A flaw was found in the Linux kernel's NXP SAR Analog-to-Digital Converter ADC module. A local user can trigger a division-by-zero error by providing a zero or negative value to the samplingfrequency sysfs attribute. This vulnerability can lead to a denial of service DoS due to the kernel crashin...

CVE-2026-63888

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target subsystem. This vulnerability involves a buffer overread and a double-free error when processing iSCSI Text commands. A remote attacker could exploit these issues by sending specially crafted network...

CVE-2026-63994

A flaw was found in the Linux kernel's tunnels module. This vulnerability, categorized as a Use-After-Free UAF, arises from improper handling of network header pointers during certain packet processing operations. Specifically, functions responsible for building Internet Control Message Protocol...

CVE-2026-63946

A flaw was found in the Linux kernel's Bluetooth ISO Isochronous Stream subsystem. This vulnerability, known as a Use-After-Free, occurs because the system attempts to use a memory area after it has been released, which can lead to unpredictable behavior. A malicious actor could potentially explo...

CVE-2026-63887

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target functionality. This vulnerability, a heap overrun, occurs because the iscsiencodetextoutput function does not properly check buffer capacity when processing login requests. A remote attacker could exploit...

CVE-2026-63891

A flaw was found in the Linux kernel's Thunderbolt property parsing. An untrusted Thunderbolt peer, such as a cable or dock, can send specially crafted property requests that create a recursive loop. This can lead to kernel stack exhaustion, resulting in a system crash and a Denial of Service DoS...

CVE-2026-64017

A flaw was found in the Linux kernel's blk-mq component. This use-after-free vulnerability occurs when a task attempts to submit a bio a data structure for I/O operations to blk-mq. If the task is interrupted and sleeps after checking for a cached request but before using it, the cached request c...

CVE-2026-63930

A flaw was found in the Linux kernel's Industrial I/O IIO hardware consumer buffer component. This use-after-free vulnerability occurs in the errputbuffers cleanup path of iiohwconsumeralloc. During buffer cleanup, the code incorrectly uses listforeachentry to iterate through buffers while...

CVE-2026-63933

A flaw was found in the Linux kernel's adis16260 gyroscope driver. A local user can trigger a division-by-zero error by writing a zero value to the samplingfrequency sysfs attribute. This can lead to a kernel panic, resulting in a system crash and a Denial of Service DoS...

CVE-2026-63881

A flaw was found in the Linux kernel's AMD KFD Kernel Fusion Driver debugger component. The getqueueids function, responsible for handling queue identifiers, contains an integer overflow vulnerability. This occurs when calculating the size of an array, where a malicious local user could provide a...

CVE-2026-63905

A flaw was found in the Linux kernel's USB/IP Virtual USB Device Controller vudc component. A race condition exists in the vudcremove function, which can lead to a use-after-free vulnerability. This occurs when the system attempts to free a data structure while a timer within it is still active o...